CVE-2020-0696 - A security feature bypass vulnerability exists in Microsoft Outlook software when it improperly handles the parsing of URI formats, aka 'Microsoft Outlook Security Feature Bypass Vulnerability'

Back Back to CVE browser

MEDIUM

A security feature bypass vulnerability exists in Microsoft Outlook software when it improperly handles the parsing of URI formats, aka 'Microsoft Outlook Security Feature Bypass Vulnerability'

Published Feb 11, 2020

6.5

MEDIUM

CVSS 3.1

EPSS 4.99%

Description

A security feature bypass vulnerability exists in Microsoft Outlook software when it improperly handles the parsing of URI formats, aka 'Microsoft Outlook Security Feature Bypass Vulnerability'.

Affected products

Vendor Microsoft Product Microsoft Office Default
n/a
- Version
  2019 for 32-bit editions
  Status
  affected
  Constraints
  -
- Version
  2019 for 64-bit editions
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Microsoft Outlook Default
n/a
- Version
  2010 Service Pack 2 (32-bit editions)
  Status
  affected
  Constraints
  -
- Version
  2010 Service Pack 2 (64-bit editions)
  Status
  affected
  Constraints
  -
- Version
  2013 RT Service Pack 1
  Status
  affected
  Constraints
  -
- Version
  2013 Service Pack 1 (32-bit editions)
  Status
  affected
  Constraints
  -
- Version
  2013 Service Pack 1 (64-bit editions)
  Status
  affected
  Constraints
  -
- Version
  2016 (32-bit edition)
  Status
  affected
  Constraints
  -
- Version
  2016 (64-bit edition)
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Office 365 ProPlus Default
n/a
- Version
  32-bit Systems
  Status
  affected
  Constraints
  -
- Version
  64-bit Systems
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft

Microsoft Office

n/a

Version	Status	Constraints
2019 for 32-bit editions	affected	-
2019 for 64-bit editions	affected	-

Microsoft

Microsoft Outlook

n/a

Version	Status	Constraints
2010 Service Pack 2 (32-bit editions)	affected	-
2010 Service Pack 2 (64-bit editions)	affected	-
2013 RT Service Pack 1	affected	-
2013 Service Pack 1 (32-bit editions)	affected	-
2013 Service Pack 1 (64-bit editions)	affected	-
2016 (32-bit edition)	affected	-
2016 (64-bit edition)	affected	-

Microsoft

Office 365 ProPlus

n/a

Version	Status	Constraints
32-bit Systems	affected	-
64-bit Systems	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-2189
Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0696
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-2189		Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0696		x_refsource_MISCPatchVendor Advisory